Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)

T2Covered by 1 source · first reported by Help Net Security at 29 Sept, 09:50 UTC

Apple has shipped iOS and macOS security updates to fix an actively exploited zero-day vulnerability (CVE-2026-86950) in the operating systems’ Core Graphics framework. “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted…